| Sandrine Bailleux | 5d50508 | 2020-01-10 14:32:30 +0100 | [diff] [blame^] | 1 | /* |
| 2 | * Copyright (c) 2020, Arm Limited. All rights reserved. |
| 3 | * |
| 4 | * SPDX-License-Identifier: BSD-3-Clause |
| 5 | */ |
| 6 | |
| 7 | #ifndef DUALROOT_COT_H |
| 8 | #define DUALROOT_COT_H |
| 9 | |
| 10 | /* Certificates. */ |
| 11 | enum { |
| 12 | /* Certificates owned by the silicon provider. */ |
| 13 | TRUSTED_BOOT_FW_CERT, |
| 14 | TRUSTED_KEY_CERT, |
| 15 | SCP_FW_KEY_CERT, |
| 16 | SCP_FW_CONTENT_CERT, |
| 17 | SOC_FW_KEY_CERT, |
| 18 | SOC_FW_CONTENT_CERT, |
| 19 | TRUSTED_OS_FW_KEY_CERT, |
| 20 | TRUSTED_OS_FW_CONTENT_CERT, |
| 21 | FWU_CERT, |
| 22 | |
| 23 | /* Certificates owned by the platform owner. */ |
| 24 | NON_TRUSTED_FW_CONTENT_CERT, |
| 25 | }; |
| 26 | |
| 27 | /* Certificate extensions. */ |
| 28 | enum { |
| 29 | /* Extensions used in certificates owned by the silicon provider. */ |
| 30 | TRUSTED_FW_NVCOUNTER_EXT, |
| 31 | TRUSTED_BOOT_FW_HASH_EXT, |
| 32 | TRUSTED_BOOT_FW_CONFIG_HASH_EXT, |
| 33 | HW_CONFIG_HASH_EXT, |
| 34 | TRUSTED_WORLD_PK_EXT, |
| 35 | SCP_FW_CONTENT_CERT_PK_EXT, |
| 36 | SCP_FW_HASH_EXT, |
| 37 | SOC_FW_CONTENT_CERT_PK_EXT, |
| 38 | SOC_AP_FW_HASH_EXT, |
| 39 | SOC_FW_CONFIG_HASH_EXT, |
| 40 | TRUSTED_OS_FW_CONTENT_CERT_PK_EXT, |
| 41 | TRUSTED_OS_FW_HASH_EXT, |
| 42 | TRUSTED_OS_FW_EXTRA1_HASH_EXT, |
| 43 | TRUSTED_OS_FW_EXTRA2_HASH_EXT, |
| 44 | TRUSTED_OS_FW_CONFIG_HASH_EXT, |
| 45 | SCP_FWU_CFG_HASH_EXT, |
| 46 | AP_FWU_CFG_HASH_EXT, |
| 47 | FWU_HASH_EXT, |
| 48 | |
| 49 | /* Extensions used in certificates owned by the platform owner. */ |
| 50 | PROT_PK_EXT, |
| 51 | NON_TRUSTED_FW_NVCOUNTER_EXT, |
| 52 | NON_TRUSTED_FW_CONTENT_CERT_PK_EXT, |
| 53 | NON_TRUSTED_WORLD_BOOTLOADER_HASH_EXT, |
| 54 | NON_TRUSTED_FW_CONFIG_HASH_EXT, |
| 55 | }; |
| 56 | |
| 57 | /* Keys. */ |
| 58 | enum { |
| 59 | /* Keys owned by the silicon provider. */ |
| 60 | ROT_KEY, |
| 61 | TRUSTED_WORLD_KEY, |
| 62 | SCP_FW_CONTENT_CERT_KEY, |
| 63 | SOC_FW_CONTENT_CERT_KEY, |
| 64 | TRUSTED_OS_FW_CONTENT_CERT_KEY, |
| 65 | |
| 66 | /* Keys owned by the platform owner. */ |
| 67 | PROT_KEY, |
| 68 | }; |
| 69 | |
| 70 | #endif /* DUALROOT_COT_H */ |